Privacy Policy

1. Who we are

The Angel App Ltd("TheAngel", "we") runs theangel.app, portfolio software for angel investors. We are the data controller for the personal data described in this policy. We are a company registered in England and Wales, company number 09809528, registered office 20 Wenlock Road, London N1 7GU, registered with the UK Information Commissioner's Office (ICO) under number Z8265701. We process personal data in line with the UK GDPR and the Data Protection Act 2018.

2. Data we collect

We collect:

• Account data: your email address, which is also how you sign in (a one-time link; we do not hold a password).
• Portfolio data: the positions, companies, marks, notes and documents you add, and any email you forward to us for a position.
• Founder update request data:the founder's email address and the answer they give when you send them a request.
• Contact form data: your name, email address and message, if you write to us through the Contact page.
• Technical and cookie data: IP address, browser and device information, and cookies or similar technologies; see our Cookie Policy for the categories we use and how to manage them.

3. How we use your data

We use personal data to:

• Provide and operate the tracker: store your portfolio, calculate your figures, and send you a one-time sign-in link.
• Send a founder update request on your behalf, and show you their answer.
• Read documents and forwarded emails you add, using Anthropic's AI models, to pull out the terms of a position automatically.
• Give you support: a small number of TheAngel staff can read your portfolio to help you when you ask.
• Reply to a message sent through the Contact page.
• Detect abuse and enforce rate limits, for example on founder update requests and the contact form.
• Understand how the site is used, and, only where you have given marketing consent, measure the effectiveness of our own advertising.

Our legal basis is performance of our contract with you (running your portfolio, sending update requests), our legitimate interests (support, security, improving the Service), or your consent (marketing cookies).

4. Who we share data with

We use the following processors to run the Service:

• Supabase: our database, hosted in London.
• Vercel: hosting for the website and tracker.
• Anthropic: reads documents and forwarded emails you add, to extract investment terms.
• Resend: sends and receives email on our behalf (sign-in links, founder update requests, the contact form).
• Google, Meta and LinkedIn: analytics and, only once you have given marketing consent in the cookie banner, advertising measurement. See the Cookie Policy.

A founder you send an update request to receives your name and the request; they do not receive any other part of your portfolio. We do not sell personal data, and we share it with no one else except where required by law, for example a request from a UK regulator or law enforcement body.

5. International transfers

Your portfolio data is held in Supabase's London region. Some of our processors (Anthropic, Resend, Vercel, and Google, Meta or LinkedIn where you have given marketing consent) may process data outside the UK, including in the United States. Where that happens, we rely on the UK International Data Transfer Addendum, the EU Standard Contractual Clauses, or another safeguard recognised under UK data protection law.

6. Retention

We keep your portfolio data for as long as your account exists. When you delete your portfolio from Settings, we delete it, along with every file you uploaded; this is permanent. A founder update request you sent, and the founder's answer, is kept as part of the relevant company's record until you delete it. We do not keep a separate copy of a contact-form message in our database; it is sent to us by email and kept under our normal email retention.

7. Your rights

Under UK data protection law, you can ask us to:

• Give you access to, or a copy of, the personal data we hold about you.
• Correct inaccurate data.
• Delete your data, which you can also do yourself at any time, from Settings.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent, where we rely on consent (marketing cookies).

To exercise any of these, write to hello@theangel.app. You can also complain to the ICO, the UK's supervisory authority, at ico.org.uk.

8. Security

Your positions, marks, documents and updates are visible only to you, enforced in the database itself and not only in the app; a small number of TheAngel staff can read them to give support. Data is encrypted in transit and at rest. You sign in with a one-time link rather than a password, so there is no password to leak or reuse. More detail is on our Security page. No method of transmission or storage is completely secure, and we keep improving these controls.

9. Children

The Service is not directed at, and we do not knowingly collect personal data from, anyone under 18.

10. Changes

We may update this Privacy Policy from time to time. We will change the "Effective" date above when we do, and tell you on the Service if a change is significant.

11. Contact

Privacy questions: hello@theangel.app.